CVE-2021-24890

Published Sep 26, 2022

Last updated 2 years ago

Overview

Description: The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file
Source: contact@wpscan.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

contact@wpscan.com: CWE-352

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dplugins:scripts_organizer:*:*:*:*:*:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB32B67F-22DF-4DEE-B374-8E08002FEDCE",
            "versionEndExcluding": "3.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References